=== LAYER 3: container /tmp ===
tr: extra operand '"'
Try 'tr --help' for more information.
container /tmp: []

=== LAYER 3b: the constructed tree and the tar backup ===
r87-construct removed
tar backup removed (the live unit has its own healthy tar)
  appdata
  backups
  userdata

=== proof scratch root (empty is correct; the job creates and removes per run) ===
(nothing above = clean)
=== customer verification copies, untouched throughout ===
bookstack
calibre-web
paperless-ngx

=== LAYER 2: guest /root and /tmp ===
tr: extra operand '"'
Try 'tr --help' for more information.
grep: write error: Broken pipe
guest leftovers: []

=== apps healthy ===
opengist Up 3 minutes (healthy)
felhom-controller Up 16 minutes (healthy)
=== teardown re-verified, all three layers ===
--- LAYER 3: container /tmp ---
r87-hollow
(nothing above = empty)
--- LAYER 2: guest ---
.r87-pw.sh
rc=0
--- LAYER 1: PVE host demo-hp ---
rc=1 (1 = clean)
--- container /tmp now ---
--- guest r87 leftovers now ---
grep rc=1 (1 = nothing left)